I think that to filter decreasing non-monotonic IPv4 connections is the best filter to apply.
The only ones to maybe authorize seems to be decreasing monotonic IPv4 connections.
I did not check what could be the correct connections in IPv6 (the ones with only 6 parts seems to be the only ones which should exist in IPv6).
“You” are not welcome.